IP address
Shodan(more info)

Passive DNS

- Warden events (20)
- 2026-09-15
-
- ReconScanning (node.86eb21): 1
- 2026-09-12
-
- ReconScanning (node.86eb21): 1
- 2026-09-09
-
- ReconScanning (node.86eb21): 1
- 2026-09-06
-
- ReconScanning (node.86eb21): 1
- 2026-09-05
-
- ReconScanning (node.86eb21): 1
- 2026-08-22
-
- ReconScanning (node.86eb21): 1
- 2026-08-21
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- 2026-08-04
-
- ReconScanning (node.86eb21): 1
- 2026-08-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-29
-
- ReconScanning (node.86eb21): 1
- 2026-07-20
-
- ReconScanning (node.86eb21): 1
- 2026-07-19
-
- ReconScanning (node.86eb21): 1
- 2026-07-16
-
- ReconScanning (node.86eb21): 1
- 2026-07-15
-
- ReconScanning (node.86eb21): 1
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan |
- Origin AS
- AS41798 - TTC-AS
- BGP Prefix
- 195.58.52.0/24
- dshield
- []
- geo
- Kazakhstan, Astana
- 🕑 Asia/Almaty
- hostname
- kzastip1.idfnv.net
- Address block ('inetnum' or 'NetRange' in whois database)
- 195.58.32.0 - 195.58.63.255
- last_activity
- 2026-09-15 01:15:05
- last_warden_event
- 2026-09-15 01:15:05
- rep
- 0.007845673065236869
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 15, 22, 26, 37, 38, 70, 80, 81, 84, 88, 101, 102, 119, 175, 211, 440, 443, 449, 453, 465, 515, 548, 631, 636, 782, 785, 831, 902, 993, 1013, 1080, 1110, 1177, 1190, 1193, 1195, 1224, 1234, 1311, 1337, 1343, 1400, 1414, 1443, 1444, 1450, 1459, 1471, 1515, 1599, 1604, 1723, 1800, 1801, 1830, 1883, 1935, 1960, 1972, 1983, 2000, 2008, 2056, 2058, 2060, 2066, 2067, 2079, 2086, 2087, 2090, 2101, 2154, 2211, 2259, 2376, 2379, 2382, 2455, 2506, 2554, 2569, 2572, 2628, 2761, 3001, 3014, 3050, 3070, 3073, 3100, 3110, 3164, 3166, 3179, 3186, 3197, 3260, 3268, 3269, 3301, 3310, 3460, 3563, 3567, 3580, 3689, 3842, 4010, 4063, 4064, 4150, 4155, 4157, 4165, 4282, 4300, 4321, 4369, 4430, 4444, 4447, 4451, 4531, 4543, 4567, 4602, 4664, 4899, 4949, 5005, 5007, 5010, 5025, 5093, 5190, 5201, 5222, 5245, 5249, 5251, 5252, 5256, 5261, 5269, 5271, 5435, 5454, 5601, 5606, 5620, 5660, 5853, 5900, 5986, 6000, 6080, 6433, 6488, 6550, 6653, 6664, 6697, 7000, 7001, 7005, 7006, 7071, 7079, 7170, 7272, 7415, 7434, 7474, 7547, 7548, 7777, 7779, 8000, 8008, 8017, 8042, 8057, 8059, 8060, 8068, 8069, 8075, 8083, 8098, 8100, 8104, 8111, 8114, 8116, 8123, 8125, 8126, 8146, 8161, 8168, 8181, 8185, 8188, 8194, 8200, 8251, 8333, 8383, 8388, 8408, 8410, 8433, 8436, 8443, 8449, 8460, 8473, 8480, 8545, 8584, 8596, 8599, 8621, 8630, 8641, 8700, 8703, 8704, 8728, 8733, 8790, 8838, 8841, 8848, 8852, 8880, 8883, 8888, 8993, 9002, 9008, 9018, 9034, 9039, 9044, 9080, 9085, 9091, 9095, 9100, 9137, 9139, 9143, 9151, 9153, 9163, 9179, 9191, 9200, 9210, 9211, 9216, 9300, 9353, 9393, 9443, 9530, 9595, 9600, 9633, 9761, 9800, 9872, 9981, 9988, 9992
- Tags: honeypot
- CPEs: cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux
- ts_added
- 2024-08-27 05:04:25.552000
- ts_last_update
- 2026-09-15 05:12:51.122000
Warden event timeline
DShield event timeline

